The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
8,323 vulnerabilities with CWE-862
CVE-2025-11894
MEDIUM
Shelf Planner <2.7.0 - Info Disclosure
CVSS 5.3
CVE-2025-42899
MEDIUM
SAP S4CORE (Manage Journal Entries) - Authenticated Privilege Escalation
CVSS 4.3
CVE-2025-42882
MEDIUM
SAP NetWeaver Application Server for ABAP - Info Disclosure
CVSS 4.3
CVE-2025-48878
MEDIUM
Combodo iTop <3.2.2 - Path Traversal
CVSS 4.3
CVE-2025-64684
MEDIUM
JetBrains YouTrack < 2025.3.104432 - Information Disclosure via Feedback Form
CVSS 4.3
CVE-2025-64681
LOW
JetBrains Hub < 2025.3.104992 - Missing Authorization via Invitation Race Condition
CVSS 2.7
CVE-2025-12925
HIGH
rymcu forest < 2025-09-04 - Missing Authorization in UserDicController
CVSS 7.3
CVE-2025-12924
MEDIUM
rymcu forest < 2025-09-07 - Missing Authorization in BankController GlobalResult
CVSS 4.3
CVE-2025-11448
MEDIUM
Envira Photo Gallery <1.11.0 - Info Disclosure
CVSS 4.3
CVE-2025-12498
MEDIUM
EventPrime - Events Calendar - Privilege Escalation
CVSS 4.3
CVE-2025-7663
MEDIUM
Ovatheme Events Manager <1.8.6 - Auth Bypass
CVSS 6.5
CVE-2025-12167
MEDIUM
Contact Form 7 AWeber Extension <0.1.42 - Info Disclosure
CVSS 4.3
CVE-2025-12042
MEDIUM
Course Booking System plugin <6.1.5 - Info Disclosure
CVSS 5.3
CVE-2025-12583
MEDIUM
Simple Downloads List <1.4.3 - Info Disclosure
CVSS 6.4
CVE-2025-12527
MEDIUM
Page & Post Notes <1.3.4 - Privilege Escalation
CVSS 4.3
CVE-2025-4522
MEDIUM
IDonate 2.0.0-2.1.9 Authenticated Arbitrary User Deletion via admin_post_donor_delete()
CVSS 6.5
CVE-2025-64323
MEDIUM
kgateway <= 2.0.4 and 2.1.0-agw-cel-rbac-2.1.0-rc.2 - Unauthenticated Sensitive Data Exposure via xDS Port
CVSS 5.3
CVE-2025-5483
HIGH
LC Wizard <1.3.0 - Privilege Escalation
CVSS 8.1
CVE-2025-64179
MEDIUM
lakeFS < 1.71.0 - Unauthenticated Exposure of Sensitive Information via Usage Report Endpoint
CVSS 5.3
CVE-2025-62914
MEDIUM
Effect Maker <= 1.2.1 - Missing Authorization
CVSS 6.5
CVE-2025-62049
MEDIUM
Stylemix Cost Calculator Builder <3.5.32 - Info Disclosure
CVSS 6.5
CVE-2025-62046
MEDIUM
CodexThemes TheGem Demo Import - Info Disclosure
CVSS 6.5
CVE-2025-62037
MEDIUM
uxper Togo <1.0.4 - Info Disclosure
CVSS 6.5
CVE-2025-62033
MEDIUM
Togo < 1.0.4 - Missing Authorization
CVSS 6.5
CVE-2025-62028
MEDIUM
ThemeNectar Salient - Info Disclosure
CVSS 4.3
Details
Vulnerabilities
8,323
Exploit Likelihood
High